mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
Add comprehensive OWASP Top 10 directory structure with injection payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1,14 @@
|
||||
# A04 - Insecure Design
|
||||
|
||||
## Description
|
||||
Insecure design is a broad category representing different weaknesses expressed as "missing or ineffective control design." The difference between insecure design and insecure implementation is that design flaws are inherent to the application's architecture.
|
||||
|
||||
## Common Vulnerabilities
|
||||
- Missing security controls
|
||||
- Insufficient threat modeling
|
||||
- Insecure design patterns
|
||||
- Business logic flaws
|
||||
- Missing rate limiting
|
||||
|
||||
## Testing Approach
|
||||
Test business logic flows, analyze application architecture, and look for missing security controls or flawed design patterns.
|
||||
Reference in New Issue
Block a user